CVE-2025-69247
Received Received - Intake
Heap-Based Buffer Overflow in free5GC UPF Causes DoS

Publication date: 2026-02-23

Last updated on: 2026-02-25

Assigner: GitHub, Inc.

Description
free5GC go-upf is the User Plane Function (UPF) implementation for 5G networks that is part of the free5GC project. Versions prior to 1.2.8 have a Heap-based Buffer Overflow (CWE-122) vulnerability leading to Denial of Service. Remote attackers can crash the UPF network element by sending a specially crafted PFCP Session Modification Request with an invalid SDF Filter length field. This causes a heap buffer overflow, resulting in complete service disruption for all connected UEs and potential cascading failures affecting the SMF. All deployments of free5GC using the UPF component may be affected. Version 1.2.8 of go-upf contains a fix.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-23
Last Modified
2026-02-25
Generated
2026-06-16
AI Q&A
2026-02-24
EPSS Evaluated
2026-06-14
NVD
CVE-2025-69247
EUVD
EUVD-2025-207597
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
free5gc go-upf to 1.2.8 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability exists in free5GC go-upf, the User Plane Function implementation for 5G networks. Versions prior to 1.2.8 have a heap-based buffer overflow issue (CWE-122). This occurs when a remote attacker sends a specially crafted PFCP Session Modification Request containing an invalid SDF Filter length field. This malformed request causes a heap buffer overflow, which can crash the UPF network element.

Impact Analysis

Exploitation of this vulnerability can lead to a Denial of Service (DoS) condition by crashing the UPF network element. This results in complete service disruption for all connected User Equipments (UEs). Additionally, it may cause cascading failures affecting the Session Management Function (SMF), potentially impacting broader network operations.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate this vulnerability, you should upgrade the free5GC go-upf component to version 1.2.8 or later, as this version contains the fix for the heap-based buffer overflow issue.

Additionally, consider monitoring and restricting PFCP Session Modification Requests to prevent specially crafted packets from reaching the UPF network element.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-69247. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart